Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/378397D8539A11EAAA519470C4F9AE02.roa
File: 378397D8539A11EAAA519470C4F9AE02.roa (raw, json)
Hash identifier: xe07Bh/37lddOkgu4nWtJeTBqHbyu/j2lK7PTJ6ZiCs=
Subject key identifier: A4:B7:D4:B0:76:6D:2E:58:4D:1A:1D:28:1A:60:AF:93:07:87:1E:4C
Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74
Certificate serial: 0A6E
Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/378397D8539A11EAAA519470C4F9AE02.roa
Signing time: Wed 11 Dec 2024 10:34:37 +0000
ROA not before: Wed 11 Dec 2024 10:34:37 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 134153
IP address blocks: 103.96.104.0/22 maxlen: 22
103.96.104.0/23 maxlen: 23
103.96.104.0/24 maxlen: 24
103.96.105.0/24 maxlen: 24
103.96.106.0/23 maxlen: 23
103.96.106.0/24 maxlen: 24
103.96.107.0/24 maxlen: 24
2401:7c40::/32 maxlen: 32
2401:7c40::/48 maxlen: 48
2401:7c40:1::/48 maxlen: 48
2401:7c40:2::/48 maxlen: 48
2401:7c40:3::/48 maxlen: 48
2401:7c40:4::/48 maxlen: 48
2401:7c40:5::/48 maxlen: 48
2401:7c40:6::/48 maxlen: 48
2401:7c40:7::/48 maxlen: 48
2401:7c40:8::/48 maxlen: 48
2401:7c40:9::/48 maxlen: 48
2401:7c40:a::/48 maxlen: 48
2401:7c40:b::/48 maxlen: 48
2401:7c40:c::/48 maxlen: 48
2401:7c40:d::/48 maxlen: 48
2401:7c40:e::/48 maxlen: 48
2401:7c40:f::/48 maxlen: 48
2401:7c40:10::/48 maxlen: 48
2401:7c40:11::/48 maxlen: 48
2401:7c40:12::/48 maxlen: 48
2401:7c40:13::/48 maxlen: 48
2401:7c40:14::/48 maxlen: 48
2401:7c40:15::/48 maxlen: 48
2401:7c40:16::/48 maxlen: 48
2401:7c40:17::/48 maxlen: 48
2401:7c40:18::/48 maxlen: 48
2401:7c40:19::/48 maxlen: 48
2401:7c40:1a::/48 maxlen: 48
2401:7c40:1b::/48 maxlen: 48
2401:7c40:1c::/48 maxlen: 48
2401:7c40:1d::/48 maxlen: 48
2401:7c40:1f::/48 maxlen: 48
2401:7c40:20::/48 maxlen: 48
2401:7c40:21::/48 maxlen: 48
2401:7c40:22::/48 maxlen: 48
2401:7c40:23::/48 maxlen: 48
2401:7c40:24::/48 maxlen: 48
2401:7c40:25::/48 maxlen: 48
2401:7c40:26::/48 maxlen: 48
2401:7c40:27::/48 maxlen: 48
2401:7c40:28::/48 maxlen: 48
2401:7c40:29::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2670 (0xa6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803B8
Validity
Not Before: Dec 11 10:34:37 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67596abd-73bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:5c:27:6a:75:f7:08:39:ae:26:de:2a:9b:
79:76:48:e2:d6:e2:12:5b:f3:ea:ac:26:6f:32:37:
c2:2c:fa:57:37:7c:b0:00:fc:d1:22:dc:2c:5d:9c:
6b:9d:04:32:85:9d:76:8a:9d:27:1c:6b:6b:66:61:
8b:61:b1:7d:3c:81:0d:8b:02:bb:a5:09:39:8c:88:
d5:a4:b3:89:e1:47:81:09:18:08:08:b2:44:75:40:
18:1f:76:9c:e3:73:0c:56:b7:57:d4:de:c4:70:25:
2b:8b:a8:de:3f:bc:f9:de:ba:e9:7f:d9:17:50:c6:
71:c1:cf:92:a9:aa:c9:f8:22:f3:e6:81:f5:71:bb:
b8:f7:42:0c:e2:8f:5f:80:9d:9a:dc:c1:ef:9a:8c:
a6:67:95:b2:05:1b:66:cf:bc:4b:b6:42:30:e5:56:
62:ef:5c:f7:61:e1:4b:ca:57:5b:33:f3:c9:fc:fb:
22:eb:f3:d6:d1:5c:6c:c1:15:1a:00:9c:f2:dd:90:
63:90:bc:86:15:14:ca:38:28:92:f9:c2:b7:14:8d:
85:22:bd:37:e3:56:0e:e2:a6:b3:20:a2:db:e3:ef:
9c:fe:52:95:4f:21:f5:70:b1:23:1b:a9:14:4e:2f:
e8:7c:03:0f:b4:c0:12:f3:5d:31:10:03:c0:2c:54:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B7:D4:B0:76:6D:2E:58:4D:1A:1D:28:1A:60:AF:93:07:87:1E:4C
X509v3 Authority Key Identifier:
keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/378397D8539A11EAAA519470C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.104.0/22
IPv6:
2401:7c40::/32
Signature Algorithm: sha256WithRSAEncryption
09:ba:63:17:b2:a3:67:0d:6c:7e:c3:8b:60:1f:f9:f1:ff:e7:
4f:98:0d:5d:86:57:36:b7:df:08:f6:9c:db:f0:a3:10:40:06:
f0:18:29:9f:ee:d4:07:51:a4:f8:10:b9:a8:db:43:80:c0:29:
d8:83:22:57:4b:b4:8a:22:99:ef:74:04:89:19:2e:3e:84:f6:
29:37:28:3f:6d:19:f6:55:ba:e8:fc:8e:bf:62:4a:19:18:77:
13:d9:6f:fb:bd:24:58:35:fa:0f:64:cf:2b:9c:63:b1:a5:bb:
f1:50:e7:87:29:b5:1a:76:52:8a:0e:bb:3e:69:0d:06:d1:29:
19:72:d3:b1:c2:05:61:82:18:a4:5e:09:2e:b6:7c:7f:a9:8c:
c0:77:10:26:2e:a6:ea:ff:f2:20:12:ec:3a:3f:75:b6:c5:93:
ea:4e:1f:df:a8:83:e7:21:1a:6c:d1:94:bc:0c:80:bf:f9:9b:
01:74:ac:07:37:73:94:b1:8f:80:be:ed:2a:6b:01:bf:1c:60:
e2:1f:b2:9b:78:0e:76:3d:75:dd:cf:10:1c:14:15:c3:66:06:
be:2e:33:7a:84:47:6d:21:d0:95:c2:bb:97:05:23:7d:7c:9b:
b9:49:d2:47:04:29:b5:84:17:fa:a9:08:f0:1b:f3:96:a7:84:
61:7f:04:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:09 2025 by rpki-client